From 28476d3d53a0e4796b4396a925c44ccf32f4fe90 Mon Sep 17 00:00:00 2001 From: raja-grewal Date: Fri, 21 Nov 2025 12:40:12 +0000 Subject: [PATCH] Update docs on GrapheneOS blacklisted modules --- ..._security-misc_blacklist.conf#security-misc-shared | 11 ++++------- 1 file changed, 4 insertions(+), 7 deletions(-) diff --git a/etc/modprobe.d/30_security-misc_blacklist.conf#security-misc-shared b/etc/modprobe.d/30_security-misc_blacklist.conf#security-misc-shared index bed77f2..c70b53e 100644 --- a/etc/modprobe.d/30_security-misc_blacklist.conf#security-misc-shared +++ b/etc/modprobe.d/30_security-misc_blacklist.conf#security-misc-shared @@ -26,8 +26,11 @@ blacklist sr_mod ## GrapheneOS: ## Partial selection of their infrastructure blacklist. ## Duplicate and already disabled modules have been omitted. +## Currently snd_intel8x0 is required by some users for VirtualBox audio device ICH AC97. ## -## https://github.com/GrapheneOS/infrastructure/blob/main/etc/modprobe.d/local.conf +## https://github.com/GrapheneOS/infrastructure/tree/main/etc/modprobe.d +## https://www.kicksecure.com/wiki/Dev/audio +## https://github.com/Kicksecure/security-misc/issues/271 ## #blacklist cfg80211 #blacklist intel_agp @@ -35,12 +38,6 @@ blacklist sr_mod blacklist joydev #blacklist mousedev #blacklist psmouse -## TODO: Re-check in Debian trixie -## In GrapheneOS list, yes, "should" be out-commented here. -## But not actually out-commented. -## Breaks VirtualBox audio device ICH AC97, which is unfortunately still required by some users. -## https://www.kicksecure.com/wiki/Dev/audio -## https://github.com/Kicksecure/security-misc/issues/271 #blacklist snd_intel8x0 #blacklist tls #blacklist virtio_balloon